Software Fixes For Critical Internet Design Flaw On The Way

By Dee Chisamera
11:34, July 9th 2008
107 votes
Vote this story
Software Fixes For Critical Internet Design Flaw On The Way

The Internet's address system was found to have a critical design flaw that clears the way for any attacker to replace the addresses of Web sites with addresses of malicious servers, security researchers warned on Tuesday. The flaw allows hackers to redirect web pages as they like by using the Domain Name System (DNS).

The Domain Name System is considered to be the Internet's very own address book, which turns hostnames into IP addresses. It is an essential component of the Internet, as it allows users to connect and use Web sites.

This is bad news especially for large businesses and service providers, as the flaw permits hackers' access to unauthorized information. That however doesn't exclude personal computers, which face the same problem.

So far, there have been no reports of somebody actually exploiting the vulnerability, which was accidentally discovered by security researchers. However, security upgrades are a must in order to fix the design flaw.

Dan Kaminsky, director of penetrating testing at IOActive, who discovered the flaw months ago, explained that this is a problem affecting everyone: “Because the system is behaving exactly like it is supposed to behave, the same bug will show up in vendor after vendor after vendor.”

Software companies are currently working on distributing patches to fix the problem. System administrators will have 30 days to apply the patch.

Kaminsky explained that because we are talking about a design flaw, fixing it won't mean pointing at the exact flaw, which should make it hard for hackers to exploit the vulnerability. “We decided that the only way to do this would be a simultaneous release – Microsoft patches, Sun patches, BIND patches, he added.

This vulnerability required simultaneous security upgrades and fixing it was essential in order to protect users from becoming victims of Internet's bad guys.





© 2007 - 2009 - eFluxMedia
Tags: Internet, DNS
dotclear

Other News in

dotclear
Latest videos in Technology
Drink coffee, charge battery
'Le Croupier' brings 3D...
Parking Goes High-Tech
Facebook controversy
Solar power plant goes hybrid

dotclear
Technology You are here: Technology
» Technology   » Gadgets   » Video Games   
E-mail To A Friend Print RSS Text size: Decrease font size Increase font size
dotclear
dotclear
dotclear

Interested In This Topic?

News Alert will keep you informed. Find out more.
dotclear
Photos Gallery
dotclear